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DEVICE AND METHOD OF CONTROLLING A DRIVE UNIT 



- FIELD OF THE INVENTION 
The present invention relates to a device and a method of 
controlling a drive unit, in particular, an internal 
combustion engine in a vehicle. 

BACKGROUND INFORMATION 

German Published Patent Application No. 42 31 449 discusses a 
device for controlling the drive power of an engine having at 
least two control units, a first control unit being connected 
to a first group of measuring devices and a second control 
unit being connected to a second group of measuring devices of 
the same measuring element . There may be special advantages of 
an engine which has two independent cylinder blocks and is 
controlled by two control units or controllers. Due to the 
fact that multiple control units are connected to only one 
measuring element for detection of the performance quantity, a 
high availability and operating reliability may be guaranteed. 
The system presented here having two control units has an 
asymmetrical functionality and program code and originally has 
a main computer, which is heavily utilized, and an emergency 
computer, which is only lightly utilized. Individual functions 
of the main computer are shifted to the emergency computer to 
optimize computation time and memory. 

Instead of two controllers, German Published Patent 
Application No. 35 39 407 discusses a computer system having 
two processors for regulating characteristic quantities of an 
internal combustion engine. The two processors share the 
computer load in normal operation, each of the two processors 
being able to maintain emergency operation as an emergency 
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computer in the event of malfunction. Thus, only the functions 
needed in emergency operation are implemented on both 
processors. However, in emergency operation these functions 
have a reduced extent of performance and function in 
5 comparison with normal operation. Due to this increased 

redundancy and division of work in normal computer operation, 
which is possible as part of the emergency function, 
reliability and operating speed may be increased. 

10 Due to the asymmetrical division of functions of each 

controller or processor, the respective functionality must be 
defined, implemented, documented, tested, and maintained 
separately. Likewise, both controllers or computers must be 
equipped in the development stage with expensive measuring 

15 arrangements and/or emulation arrangements. Due to the 

asymmetrical definition of the functionality and therefore the 
asymmetrical definition of the systems, additional errors may 
occur due to a mix-up during assembly of the components, for 
example. At the same time, a further development of or change 

20 in functionality in the existing system requires that both 

controllers or computers and their respective functionalities 
be taken into account, which consequently is very complicated, 
time consuming and cost intensive. 

25 This results in the object of implementing an engine control 
system having a very high functionality which is optimized 
with respect to other prior systems. 

SUMMARY OF THE INVENTION 

30 A control system of a drive unit, in particular, of an 

internal combustion engine including a control unit where the 
control unit contains at least two computers, is described. 
The functionality of the control unit or controller, too 
complex for one computer, may be divided among at least two 

35 computers in one controller. The program memories of the two 

computers or computing units contain the same program code, so 
that both computers may have an identical possible 
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functionality. Thus the individual functionalities may be 
selectable to be less complex than the required overall 
functionality, so that the complex overall functionality may 
nevertheless be obtained via all computers or processors. In 
use, largely the same program code may be run through, 
although there may be individual parts that are present in 
both memories or computers but are processed asymmetrically, 
i.e., only in or from one memory. 

The functions may be divided among more than two computers, or 
additional computers may be present in the overall system, 
although they execute a different program code, i.e., they 
have a different functionality. The computers may then be 
appropriately accommodated in different controllers. 

The two computers having identical possible functionalities 
may appropriately exchange information, e.g., over a serial or 
parallel bus system such as a CAN bus or other serial 
interfaces or a DPRAM. It may be advantageous that the 
functionality need only be defined, implemented, documented, 
tested and maintained once due to the symmetrical division of 
function and the identical functionalities, but it may be used 
for both computers or computer units. 

In manufacturing the controller, e.g., in prototype building 
or in production, the program memory which contains the 
program code and thus the functionality may be assembled twice 
in the controller, so there may be no possibility of mix-ups. 

In the development and application phase, one may 
appropriately concentrate on one of the symmetrical sides. It 
may be sufficient to equip one side with expensive measuring 
arrangements or emulation devices. Due to the symmetrical 
division of functions and the symmetrical functionality on 
both computers, a modular design of the controller and the 
controller program may be possible. This makes further 
developments through changes in existing functions and/or 
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introduction of new functions much easier and faster in 
comparison with an asymmetrical structure because there may be 
no interface problems or timing problems between the functions 
distributed among the computers. This results in lower 
development costs and shorter development times. 

The main point is thus the symmetry and functionality of the 
computer system and the use of program memories including a 
completely identical program code for the at least two 
computers or computing units in the controller. 

The present invention is described in greater detail below on 
the basis of the exemplary embodiments illustrated in the 
drawings . 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 shows a block diagram of a control unit including two 
computing elements or computers which control at least one 
performance quantity in the vehicle, for example the 
performance of a drive unit, in particular, of an internal 
combustion engine. 

Figure 2 illustrates functional relationships between the two 
computers in the controller and their environment. 

Figure 3 shows the exemplary embodiment with functional 
relationships based on lambda* regulation for calculation of 
injection in the internal combustion engine. 

DETAILED DESCRIPTION 

Figure 1 shows an electronic controller 100, which includes at 
least two computers 101 and 102, an input module 103, an 
output module 104 and a bus system 105. Other components 
and/or modules may optionally be connected to bus system 105 
as indicated by element 106. These additional optional 
elements include, for example, additional memory elements 
and/or an additional bus input /output interface, e.g., for 
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diagnosis or for connection of controller 100 to other 
controllers. Input module 103 may be combined with output 
module 104 as well as the input/output module. Computer 101 
contains, among other things, a processor 109 and a program 
5 memory 107 assigned to this processor 109. The program code 
filed in program memory 107 corresponds to the possible 
functionality with regard to the control or regulation of at 
least one performance quantity such as that it may be 
processable by processor 109. It may be advantageous for the 

10 reasons given above if first computer 101 and second computer 
102 have a completely identical design, likewise with a 
processor 110 and a program memory 108 allocated to them. 
However, different computers may optionally also be used as 
long as the possible functionality of both computing units is 

15 identical. Input module 103 receives signals which represent 
measured performance quantities of the drive unit, the drive 
train and/or the vehicle or from which such performance 
quantities may be derived. These may be performance quantities 
which may be analyzed to control an internal combustion 

20 engine. These signals may be picked up by measuring devices 
111 through 113, in particular, sensors, and may be sent to 
input module 103 via input lines 114 through 116. 

Furthermore, signals which actuate control elements or 
25 actuators for setting at least one performance quantity of the 
drive unit, in particular, the internal combustion engine of 
the vehicle, may be output via output module 104. The 
corresponding signals for controlling actuators 117 through 
119 may be delivered via output lines 120 through 122. 
30 Depending on the input signals, performance quantities and/or 
internal quantities derived from them, computers 101 and 102 
form values for the controlled variables which may be output 
and which set the control elements in the sense of a 
predetermined control or regulatory strategy as part of the 
35 programs implemented therein. Controller 100 may be a control 
unit for controlling a drive unit, in particular, of an 
internal combustion engine, of a vehicle, so the position of 
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an operating element that may be operated by the driver may be 
detected and analyzed in a known way and a setpoint value for 
a torque of the drive unit may be determined. A setpoint value 
for the torque may then be determined by taking into account 
setpoint values of other control systems received over input 
module 103, e.g., a traction control, a transmission control, 
etc., as well as setpoint values formed internally (limits, 
etc.) . Then in an exemplary embodiment of an internal 
combustion engine control system, this may be converted to a 
setpoint value for setting the throttle valve, which may be 
set as part of a position control loop. Furthermore, depending 
on the design of the internal combustion engine, additional 
performance -determining functions may be provided, e.g., a 
control for a turbo charger of an exhaust gas recycling 
system, an idling speed regulation, etc. 

In addition, with internal combustion engines having direct 
gasoline injection, not only the air setting but also the 
determination of the fuel mass to be injected, the 
determination of an air/fuel ratio to be set, the preselection 
of the injection course (pre-injection, post - inj ect ion) , the 
control of a charge movement valve, etc., have a crucial 
effect on performance, so that, in addition to the programs 
described there, a plurality of other programs may be provided 
which have an influence on the performance of the internal 
combustion engine and thus on the safety of the vehicle. 

This plurality of programs may be filed or may be installed in 
the form of a program code in respective program memories 107 
and 108 of the computer. The functionalities of a controller 
represented by the programs or program code in the program 
memory as described here may be very complex. Therefore, these 
complex functionalities of the controller should be divided 
symmetrically between at least two computers in such a 
controller. The computers may exchange information, e.g., over 
a communication system, in particular a bus system such as a 
CAN bus or another serial or parallel interface or a memory 
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element, in particular, a DPRAM . Program memories 107 and 108 
of two computers 101 and 102 contain the same program code. In 
addition, the identical program code may be executed to a 
great extent, but there may be individual parts which, for 
5 some reason, are processed asymmetrically. For example, the 
required programs or sections to be processed asymmetrically 
may then be activated or deactivated via hardware lines and 
signals transmitted on them. For the sake of simplicity of the 
diagram, these line connections may be represented by 
10 communication system 105 and/or may be integrated into it. 

The procedure described above is illustrated in Figure 2 with 
regard to a division of functions Fl through F4 as an example. 
The controller is again labeled as 100, and the two computers 

15 are labeled as 101 and 102. An internal combustion engine 

including the respective actuators and sensors is labeled as 
200. This specific example shows an internal combustion engine 
including 12 cylinders divided into two cylinder blocks of six 
cylinders each. The 12 cylinders are only an example, and it 

20 may be equally possible for a different number of cylinders to 
be provided in respective cylinder blocks 200a and 200b, each 
including the respective sensors and other actuators. Thus, in 
a 12 -cylinder engine, for example, six cylinders may be 
operated by each computer with regard to ignition and 

25 injection in a gasoline engine. The functionality may be 
distributed symmetrically among the two computers. 
Functionality Fl controls one cylinder block with the 
respective sensors and actuators of the internal combustion 
engine. Sensor quantities such as the air/fuel ratio, the 

30 camshaft or crankshaft position, knocking information, air 

mass, etc. from internal combustion engine 200 may be sent to 
computers 101 and 102, in particular, their functionality Fl 
(205, 206). Actuating signals (204, 207) from functionality Fl 
reach the internal combustion engine or its actuators. 

35 Oriented connections 204 through 207 represent the 
functionality of the transmission per se . 
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Circuit parts or sensors may be used via both processors. For 
example, the sensor, e.g., a hot film air mass flow sensor and 
an input circuit, e.g., a low-pass filter, may be present only 
once for cost reasons, but the sensor signal, e.g., an A/D- 
converted air flow, may be available to the functionalities in 
both computers . 

Likewise, a controller, e.g., a secondary air pump including 
the corresponding output stage in the controller may be 
operated by only one computer, whereas the respective engine 
function, e.g., the secondary air control including diagnosis, 
runs symmetrically in both computers and also supplies 
quantities for other engine functions. 

In addition, actuators such as secondary air valve for a first 
cylinder block may be operated by the computer for the other 
cylinder block, namely the second, although the respective 
engine function may be running in the computer for the first 
cylinder block. 

The program code for operation of the actuator, e.g., for 
regulating the position of the throttle valve, may run 
symmetrically in both computers, in which case, however, the 
output stage and the actuator may be operated on one cylinder 
block, but on the other cylinder block the signal from the 
computer may be not used for control purposes. 

Due to the exemplary embodiments described above as well as 
the following description of the tank system, despite the 
identity of the functionalities and the program code, certain 
asymmetries may be provided. 

Additional peripherals such as a tank system 201 may be 
controlled and monitored by another functionality F2 . This 
functionality F2 may be likewise contained symmetrically in 
both computers 101 and 102. However, it may be processed only 
asymmetrically by computer 101, for example. Therefore, this 
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functionality F2 may be activated or deactivated by signals of 
separate hardware lines or by unambiguous signals or data over 
the communication system. Thus, if there is only one tank in 
the vehicle, diagnosis of the tank is performed in only one 
computer. Although corresponding functionality F2 is present 
on both computers in the program memory, it is activated on 
only one side. The communication relationship between 
functionality F2 in computer 101 and tank system 201 may be 
represented by connections 202 and 203. 

In addition, functionalities F3 and F4 may also be provided 
for other peripheral elements, so that, on one hand, sensor 
elements 209 and 210 may be input and processed via 
communication link 213 and 214 (F3). On the other hand, 
control elements, actuators 208 and 211 may also be operated 
via communication links 212 and 215 by functionalities F4 . 
Likewise, quantities to or from other control systems such as 
a traction control, a transmission control, etc. may be 
relayed via oriented connections 212 through 215. If sensor 
element 209 and control element 208 are elements of the same 
control loop, functionalities F3 and F4 may also be considered 
together as functionality F34 . 

Figure 3 shows an exemplary embodiment of a 12 -cylinder engine 
having a concrete functionality. Thus, this 12 -cylinder engine 
may have four parallel exhaust gas lines, for example, 
including four regulating probes 310 through 313, combined as 
lambda probes 300. Thus a quadro lambda regulation would have 
to be provided in the engine control unit, but because of its 
high complexity this entails not only increased costs but also 
risks with regard to malfunctions, in particular, security 
risks. Due to the symmetrical division of functions between 
two computers, there may be only one stereo- lambda regulation 
in each computer 101 or 102 in controller 100, i.e., the 
functionality may be far less complex. The signals supplied by 
probes 310 through 313 go via interfaces 314 through 317 for 
hardware processing. This signal processing takes place 
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through elements 308 and 309 for computer 101 and through 
elements 306 and 307 for computer 102. Probe signals US1 and 
US2 may be sent to computer 102, and probe signals US3 and US 4 
may be sent to computer 101. 

Thus only two probe signals may be analyzed in each computer, 
and the lambda regulation factors act, as explained later, 
only on six injectors via the injection calculation. Then, as 
stated previously, the same-stereo lambda regulation may be 
performed in block 3 04a and 3 04b. To do so, processed probe 
signals US1 and US 2 enter the regulation as probe signals USX 
and USY. Likewise, processed probe signals US 3 and US 4 in 
block 304b also enter as USX and USY into the same stereo- 
lambda regulation. Regulating factors FRX and FRY that are 
obtained from the stereo-lambda regulation may be relayed to 
downstream blocks 305a and 305b for computer 102 and computer 
101 , respectively. 

Based on regulation factors FRX and FRY, the same injection 
calculation may then be performed in blocks 305a and 305b for 
six injectors in this exemplary embodiment. The resulting 
output quantity groups 318 and 319 may then be relayed to 
output stage blocks 320 and 321. 

On the basis of the same program code or the identical 
functionalities, the function blocks are also identical. 
Likewise, input quantities, output quantities and state 
variables of computers 101 and 102 have identical 
designations. Output quantities 318 and 319 are equally 
designated as til through ti6, although they have physically 
different meanings. Thus, til may be used once for controlling 
injector 1, EV1 , and once for controlling injector 7, EV7 . 
However, this has no relevance for the function or 
functionality or the program code. Injectors 301 may then be 
controlled via interface 302 or 303 from output stage blocks 
320 and 321. 
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The symmetrical distribution of functions discussed above is 
illustrated in Figures 1, 2 and 3, although parts may be 
processed asymmetrically. Nevertheless, the functionality and 
the program code are identical for both computers and are run 
through in both computers independently of one another. There 
is no redundancy and there are no emergency operating 
properties in sensors, output stages or functionality. Such a 
redundancy would have to be generated additionally, 
independently of the exemplary embodiments according to the 
present invent ion . 
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